From 8e33a709815cb60b09f306269788b0ec11372e9c Mon Sep 17 00:00:00 2001 From: michael Date: Wed, 30 Dec 2015 10:06:26 +0000 Subject: [PATCH] * Prevent timing attack, patch by Thaddy De Koning git-svn-id: trunk@32795 - --- packages/hash/src/md5.pp | 3 +++ 1 file changed, 3 insertions(+) diff --git a/packages/hash/src/md5.pp b/packages/hash/src/md5.pp index 62101b9a99..0f11269f9d 100644 --- a/packages/hash/src/md5.pp +++ b/packages/hash/src/md5.pp @@ -722,7 +722,10 @@ var A: array[0..3] of Cardinal absolute Digest1; B: array[0..3] of Cardinal absolute Digest2; begin +{$push} +{$B+} Result := (A[0] = B[0]) and (A[1] = B[1]) and (A[2] = B[2]) and (A[3] = B[3]); +{$pop} end; procedure MD2Init(out Context: TMD2Context);